Systems and methods for electronic signing of electronic content requests
Systems and methods are disclosed for cryptographic signing of content requests. One method includes receiving, at a content network, a content request from a publisher website, the publisher website purporting to be associated with a publisher domain. At the content network, a public key may be received associated with the publisher domain. At the content network, at least one policy may be received associated with the publisher domain. It may be determined whether the content request comprises a cryptographic signature. If it is determined that the content request does not comprise a cryptographic signature, content may or may not be provided to the publisher website according to the policy from the publisher domain. If it is determined that the content request comprises a cryptographic signature, the cryptographic signature of the request may be validated using the public key. Upon successfully validating the cryptographic signature of the content request, content maybe provided to the publisher website according to the content request.
1. A method for validating an identity of publisher websites, the method including:
receiving a content request from a publisher website purporting to be associated with a publisher domain;
receiving a policy associated with the publisher domain, the policy comprising a signature requirement;
upon determining that the received content request does not include a digital signature,
determining how to provide content to the publisher website according to the policy associated with the publisher domain;
upon determining that the received content request includes a digital signature validating the digital signature using a key provided by the publisher domain; and
upon successful validation, providing content to the publisher website according to the content request.
2. The method of claim 1 , further comprising:
prompting the publisher domain to add digital signatures to content requests.
3. The method of claim 1 , further comprising:
upon determining that the content request does not comprise a digital signature, forwarding information associated with the content request to the publisher domain.
4. The method of claim 1 , further comprising:
upon determining that the content request does not comprise a digital signature, forwarding the content request to the publisher domain with a request for a corresponding digital signature.
5. The method of claim 1 , further comprising:
providing content to the publisher website for additional content requests from the publisher website without validation.
6. The method of claim 1 , further comprising:
receiving a plurality of content requests from the publisher domain; and
validating digital signatures associated with the content requests in a batch.
7. The method of claim 1 , further comprising:
determining that the content policy associated with the publisher domain requires all content requests associated with the publisher domain to be digitally signed; and
upon determining that the content request does not comprise a validated digital signature, denying the content request.
8. The method of claim 1 , wherein a publisher key is received from a Domain Name Server associated with the publisher domain.
9. A system for validating an identity of publisher websites, the system including:
at least one data storage device storing instructions for validating the identity of publisher websites; and
at least one processor configured to execute the instructions to perform a method comprising:
receiving a content request from a publisher website purporting to be associated with a publisher domain;
receiving a policy associated with the publisher domain, the policy comprising a signature requirement;
upon determining that the received content request does not include a digital signature;
determining how to provide content to the publisher website according to the policy associated with the publisher domain;
upon determining that the received content request includes a digital signature, validating the digital signature using a key provided by the publisher domain; and
upon successful validation, providing content to the publisher website according to the content request.
10. The system of claim 9 , further comprising:
prompting the publisher domain to add digital signatures to content requests.
11. The system of claim 9 , the method further comprising:
upon determining that the content request does not comprise a digital signature, forwarding information associated with the content request to the publisher domain.
12. The system of claim 9 , the method further comprising:
upon determining that the content request does not comprise a digital signature, forwarding the content request to the publisher domain with a request for a corresponding digital signature.
13. The system of claim 9 , the method further comprising:
providing content to the publisher website for additional content requests from the publisher website without validation.
14. The system of claim 9 , the method further comprising:
receiving a plurality of content requests from the publisher domain; and
validating digital signatures associated with the content requests in a batch.
15. The system of claim 9 , the method further comprising:
determining that the content policy associated with the publisher domain requires all content requests associated with the publisher domain to be digitally signed; and
upon determining that the content request does not comprise a validated digital signature, denying the content request.
16. The system of claim 9 , wherein a publisher key is received from a Domain Name Server associated with the publisher domain.
17. A non-transitory computer-readable medium storing instructions that, when executed by a computer, cause the computer to perform operations validating an identity of publisher websites, the operations comprising:
receiving a content request from a publisher website purporting to be associated with a publisher domain;
receiving a policy associated with the publisher domain, the policy comprising a signature requirement;
upon determining that the received content request does not include a digital signature,
determining how to provide content to the publisher website according to the policy associated with the publisher domain;
upon determining that the received content request includes a digital signature, validating the digital signature using a key provided by the publisher domain; and
upon successful validation, providing content to the publisher website according to the content request.
18. The computer-readable medium of claim 17 , the operations further comprising:
upon determining that the content request does not comprise a digital signature, forwarding the content request to the publisher domain with a request for a corresponding digital signature.
19. The computer-readable medium of claim 17 , the operations further comprising:
providing content to the publisher website for additional content requests from the publisher website without validation.
20. The computer-readable medium of claim 17 , the operations further comprising:
receiving a plurality of content requests from the publisher domain; and
validating digital signatures associated with the content requests in a batch.